Static task
static1
Behavioral task
behavioral1
Sample
d8852066d195930d8d9f1d40e4b86ffee761e9245da41a79bb6e39ad828526d6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d8852066d195930d8d9f1d40e4b86ffee761e9245da41a79bb6e39ad828526d6.exe
Resource
win10v2004-20220812-en
General
-
Target
d8852066d195930d8d9f1d40e4b86ffee761e9245da41a79bb6e39ad828526d6
-
Size
124KB
-
MD5
219b80e76010f0e58b4427a6f55e1193
-
SHA1
0ab3de79b8f71b52e1c29b8854f33fe83b4a435f
-
SHA256
d8852066d195930d8d9f1d40e4b86ffee761e9245da41a79bb6e39ad828526d6
-
SHA512
d98315632ce2ded2a46137ba35c98e9c785252c667ad2d48963f02519deaf570410dbddc1eeee078257323cf19ae2d89adef7e863c20134ded6859f6ff3bfcee
-
SSDEEP
3072:jhL270UhENErgGBPunq7XyliEITx0OvDbmr7k3akQkZhVD:NSRpMGBP8xOv3coD
Malware Config
Signatures
Files
-
d8852066d195930d8d9f1d40e4b86ffee761e9245da41a79bb6e39ad828526d6.exe windows x86
d5a5b425534f269834f4395de83fbf08
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
InterlockedExchange
HeapSize
RtlUnwind
InitializeCriticalSection
SetFilePointer
VirtualQuery
GetSystemInfo
VirtualFree
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCPInfo
GetOEMCP
GetACP
SetEnvironmentVariableA
FlushFileBuffers
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
WriteFile
GetStdHandle
SetHandleCount
WideCharToMultiByte
DeleteCriticalSection
HeapFree
HeapReAlloc
GetVersionExA
ExitThread
GetFileAttributesA
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
ExitProcess
FindNextFileA
FindFirstFileA
FreeLibrary
GetCommandLineA
WaitForSingleObject
GetExitCodeProcess
CompareStringW
QueryPerformanceFrequency
GetModuleFileNameA
CreateFileA
Sleep
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileAttributesExA
LocalAlloc
CreateFileW
CreateIoCompletionPort
GetComputerNameA
LoadLibraryA
MultiByteToWideChar
FindClose
MoveFileExA
DeleteFileA
LoadLibraryExA
CreateThread
GetFileSize
VirtualAlloc
WaitForSingleObjectEx
SetThreadPriorityBoost
GetQueuedCompletionStatus
GetCurrentThread
SetThreadAffinityMask
ReadFile
SetEvent
GlobalAddAtomW
GetPrivateProfileStringW
GlobalReAlloc
lstrlenW
lstrcmpiW
lstrcpynW
LocalFree
LoadLibraryW
GetWindowsDirectoryW
GetProcAddress
GetModuleHandleW
UnhandledExceptionFilter
GetLastError
InterlockedIncrement
QueryPerformanceCounter
InterlockedDecrement
LCMapStringA
LCMapStringW
GetLocaleInfoA
SetEndOfFile
GetTimeZoneInformation
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFullPathNameA
GetCurrentDirectoryA
GetStartupInfoA
CloseHandle
OutputDebugStringW
user32
wsprintfW
CharPrevW
GetParent
UnhookWindowsHookEx
SetWindowsHookExW
GetWindowRect
GetPropW
RemovePropW
SetPropW
IsWindowVisible
ShowWindow
GetSystemMetrics
CharNextExA
advapi32
RegEnumKeyA
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA
RegOpenKeyW
RegEnumKeyExW
RegDeleteValueW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegOpenKeyExA
ole32
CoAddRefServerProcess
CoCreateInstanceEx
CoTaskMemAlloc
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
CoInitializeSecurity
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
msvcrt
iswascii
wcscpy
wprintf
strchr
wcslen
swprintf
atoi
exit
atol
memmove
free
malloc
strpbrk
strncpy
clock
fopen
ctime
fprintf
remove
toupper
isdigit
strncmp
strspn
sprintf
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ